Stage 01
Know
What does the person know?
Awareness provides the foundational knowledge required to recognise risk.
The Framework
Cybersecurity is human.
So we need to understand what shapes the decisions people make.
The TheCyberMamushka Human-Centered Cybersecurity Framework helps us examine how people actually make cybersecurity decisions — and what can make those decisions safer.
Instead of stopping at “Why did they click?” we ask:
- What did they know?
- What did they recognise?
- What pressures were influencing them?
- What did the environment make easy or difficult?
- What options did they believe they had?
- What happened after the decision?
Move from blame to diagnosis — and from diagnosis to better support.
The Framework at a glance
A decision, the pressures acting on it, the environment around it — and what we change next.
01 · Decision Journey
KnowRecognisePauseJudgeActRecover
02 · Human Pressures
UrgencyTrustAuthorityFearFatigueConvenienceUncertaintyHabit
03 · Decision Environment
SystemsProcessesCultureTechnologyIncentivesSocial Norms
04 · Diagnostic & Intervention
Diagnose → Intervene → better conditions for safer decisions.
Layer 01 · Decision Journey
Six moments inside one decision.
Know → Recognise → Pause → Judge → Act → Recover. Any of these can be where safety breaks down.
Stage 02
Recognise
Can they identify that the situation may involve risk?
Knowing what phishing is does not guarantee that someone will recognise a convincing phishing attempt.
Stage 03
Pause
Is there enough space to think?
Many attacks rely on urgency. Creating a pause gives people room to verify, question and reconsider.
Stage 04
Judge
Can they reason through uncertainty?
Digital judgment is the ability to interpret a situation, weigh risk, question assumptions and choose a safer response.
Stage 05
Act
Can they actually carry out the safer action?
Secure behaviour depends partly on whether systems and processes make that action practical.
Stage 06
Recover
What happens if something goes wrong?
Cyber safety includes reporting, containment, recovery and learning.
Layer 02 · Human Pressures
Decisions are made under pressure.
Cybersecurity decisions rarely happen in calm conditions. These pressures bend judgment — and they usually arrive together.
Urgency
Speed removes the pause where verification would have happened.
Trust
A familiar name borrows credibility the message never earned.
Authority
Requests from the top feel unsafe to question or slow down.
Fear
Threat of loss narrows attention to making the fear stop.
Fatigue
Tired attention takes the shortest route, not the safest one.
Convenience
The easy path wins whenever the safe path costs more effort.
Uncertainty
Without a clear rule, people guess — and guesses follow the pressure.
Habit
Repeated actions run automatically, long before judgment engages.
When pressures combine
Authority + urgency + trust
Executive impersonation
Fear + urgency + familiarity
Mobile money or account scams
Convenience + fatigue + habit
Security workarounds
Layer 03 · Decision Environment
What surrounds the person.
Human-centered cybersecurity looks past the individual to the conditions they are deciding inside.
Systems
What the tools allow, block, warn about or quietly permit.
Processes
Whether verifying, checking or escalating is a real option.
Culture
Whether questioning and reporting feel safe to do.
Technology
Where controls carry the load instead of the person.
Incentives
What speed, targets and pressure reward in practice.
Social Norms
What people around them treat as normal behaviour.
Do our systems, culture and processes help people use what they know when it matters?
Safer cybersecurity behaviour cannot depend on human willpower alone.
The principle
Diagnose before you train.
Training is one intervention, not the default one. Different problems require different responses.
Knowledge gap
Education
Recognition gap
Realistic scenarios
Judgment difficulty
Practice and reflection
Process friction
Process redesign
Technology friction
Interface or control redesign
Authority pressure
Leadership and culture intervention
Reporting fear
Reporting and psychological-safety redesign
Recovery gap
Incident-response education and support
The intervention model
Educate
Practise
Prompt
Redesign
Support
Reinforce
The goal: better conditions for safer decisions.
The practical tool
The six diagnostic questions.
Use them after any incident, near miss or risky decision — at home, in a classroom or in an organisation.
01
What did the person know?
02
What did they recognise?
03
What pressures were influencing them?
04
What did the environment make easy or difficult?
05
What options did they believe they had?
06
What happened after the decision?
Where it applies
Home → Community → School → Workplace.
The environments change. The human pressures often do not.
Home
Where habits are formed.
Community
Where trust travels fastest.
School
Where judgment is practised.
Workplace
Where habits are inherited.
Cyber safety begins at home.
The Mamushka Method™
How people respond in the moment.
Pause → Check → Talk → Protect → Recover. Five practical habits for everyday digital moments.
Step 01
Pause
Slow down before reacting to urgency, fear, pressure or fatigue.
Step 02
Check
Verify messages, links, identities and requests before acting.
Step 03
Talk
Make cyber safety discussable — without shame or blame.
Step 04
Protect
Passwords, MFA, device locks, privacy settings, backups, recovery.
Step 05
Recover
Know what to do when something goes wrong.
The Framework
helps us understand why a decision happens.
The Diagnostic
helps us identify where it became vulnerable.
The Intervention Model
helps us decide what needs to change.
The Mamushka Method
gives people a practical way to respond in the moment.
Strategic positioning
Knowledge, judgment, and the conditions around them.
Awareness
gives people knowledge.
Digital judgment
helps people apply it.
Human-centered cybersecurity
asks what shapes the decision and whether the environment supports safer action.
If people know what to do, what helps them actually do it when it matters?
Cybersecurity behaviour is shaped by:
- the person
- the pressure
- the environment
- the decision
- and what happens next
Cybersecurity is human. So the way we design cybersecurity must be human too.